View Source

Class XssProtectionCheck

Health check for the recommended production setup regarding the X-XSS-Protection header.

Inheritance

System.Object

HealthCheck

BaseHttpHeaderCheck

Namespace: Umbraco.Cms.Core.HealthChecks.Checks.Security

Assembly: Umbraco.Core.dll

Syntax

public class XssProtectionCheck : BaseHttpHeaderCheck, IDiscoverable

Constructors

XssProtectionCheck(IHostingEnvironment, ILocalizedTextService)

Initializes a new instance of the XssProtectionCheck class.

Declaration

public XssProtectionCheck(IHostingEnvironment hostingEnvironment, ILocalizedTextService textService)

Parameters

Type	Name	Description
IHostingEnvironment	hostingEnvironment
ILocalizedTextService	textService

Remarks

The check is mostly based on the instructions in the OWASP CheatSheet (https://www.owasp.org/index.php/HTTP_Strict_Transport_Security_Cheat_Sheet) and the blog post of Troy Hunt (https://www.troyhunt.com/understanding-http-strict-transport/) If you want do to it perfectly, you have to submit it https://hstspreload.appspot.com/, but then you should include subdomains and I wouldn't suggest to do that for Umbraco-sites.

Properties

ReadMoreLink

Gets a link to an external read more page.

Declaration

protected override string ReadMoreLink { get; }

Property Value

Type	Description
System.String